Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/36342e342e3136392e302f32342d3234203d3e20323132343438.roa
File: 36342e342e3136392e302f32342d3234203d3e20323132343438.roa (raw, json)
Hash identifier: N/bPoZ58uhxF5bGGXTsdiOykWEB31ORLk1ce6VRFTDw=
Subject key identifier: D5:5B:B5:45:5B:49:76:79:4A:62:AE:2A:4D:C0:7D:29:76:F5:A9:5A
Certificate issuer: /CN=58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845
Certificate serial: 5E32A0B39873E444A275EC6133B91ED16E0F8EB1
Authority key identifier: E9:AB:82:D4:D9:BF:4C:16:EA:6E:7C:FA:F3:EE:14:CF:EC:5A:4A:8A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/36342e342e3136392e302f32342d3234203d3e20323132343438.roa
Signing time: Tue 16 May 2023 15:24:46 +0000
ROA not before: Tue 16 May 2023 15:19:46 +0000
ROA not after: Tue 14 May 2024 15:24:46 +0000
asID: 212448
IP address blocks: 64.4.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:32:a0:b3:98:73:e4:44:a2:75:ec:61:33:b9:1e:d1:6e:0f:8e:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845
Validity
Not Before: May 16 15:19:46 2023 GMT
Not After : May 14 15:24:46 2024 GMT
Subject: CN=D55BB5455B4976794A62AE2A4DC07D2976F5A95A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ef:02:88:ba:93:48:f5:c0:f9:4a:5a:1b:4d:
f1:83:fe:59:09:aa:e4:3e:57:8f:12:fc:c6:87:46:
15:fb:73:6a:63:f1:d0:8a:cb:17:dc:eb:5b:19:fd:
38:35:1d:86:ff:e8:a5:4b:7d:f5:71:d0:31:d7:08:
1f:d9:42:20:de:a2:ba:a6:59:57:75:2e:4b:da:c8:
4e:a6:af:54:ba:ec:45:0b:b6:88:d6:d4:74:e2:46:
56:67:82:c3:a9:15:50:7d:38:63:3d:92:14:94:af:
48:6b:8b:ae:1e:75:2a:a1:e2:8f:7e:c8:59:6a:af:
89:d7:73:86:74:c8:0c:f6:6d:1f:44:62:bc:28:07:
e0:b8:49:eb:fd:44:cf:36:62:43:23:8d:9d:55:e7:
66:66:6d:a5:72:0f:ad:5e:53:6f:a7:98:a4:7c:d4:
42:e0:25:77:b2:5c:3b:ae:a7:26:26:fb:a6:0a:2d:
52:b1:b1:a5:d9:51:d3:99:41:43:13:24:b8:6e:fe:
52:ec:37:7f:3d:ee:b1:ce:7a:8a:62:8f:5e:eb:db:
44:dd:d5:b4:f7:ba:41:1b:1c:8c:c9:6f:4c:4b:91:
f3:ca:ac:92:c0:4f:a5:9b:53:73:03:b7:b4:2a:7a:
7c:31:21:9a:62:52:c1:ea:2d:d7:28:68:89:a8:04:
0d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:5B:B5:45:5B:49:76:79:4A:62:AE:2A:4D:C0:7D:29:76:F5:A9:5A
X509v3 Authority Key Identifier:
keyid:E9:AB:82:D4:D9:BF:4C:16:EA:6E:7C:FA:F3:EE:14:CF:EC:5A:4A:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/E9AB82D4D9BF4C16EA6E7CFAF3EE14CFEC5A4A8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/36342e342e3136392e302f32342d3234203d3e20323132343438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.4.169.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:0b:9d:12:c3:ef:bf:75:8f:4b:4f:b5:55:f8:fd:d0:3d:2d:
97:db:7c:56:3e:b4:7e:23:ed:6e:cb:93:90:eb:7f:22:7e:95:
96:c9:37:87:d6:81:c1:45:96:2e:2c:66:22:30:49:63:3b:79:
43:6e:02:b3:a4:f5:ff:b0:50:96:ab:34:ef:03:2e:6f:5a:2a:
23:64:2b:dd:35:12:d3:37:ba:f8:ba:d9:ac:94:08:57:cd:6b:
4a:a8:fc:de:f7:c2:17:6e:a3:99:c0:e3:8c:12:8e:28:48:31:
bd:ed:8a:b2:9a:e2:d8:d8:39:bb:91:1c:1b:8f:a3:0f:8f:aa:
5b:de:e3:59:45:7d:55:cc:f7:3a:e2:1f:e9:cb:48:54:5d:02:
b7:19:89:ca:eb:8e:90:8f:d0:a4:b9:8b:fb:7c:10:7f:75:ed:
e8:6d:4b:18:3e:b1:ad:3d:7f:1c:60:da:66:c0:51:d0:31:f9:
93:a0:ed:68:ba:b1:95:71:8d:5a:87:76:65:44:72:e2:77:19:
9f:88:c4:04:9d:9e:54:af:7d:2f:90:7e:fa:55:6d:49:42:98:
a4:10:9f:d3:2a:4d:27:8f:d7:09:ac:a4:05:7a:3c:95:6b:45:
ff:be:e6:f5:29:0b:29:ca:07:d2:46:97:d0:3d:c2:3a:db:3a:
5b:98:67:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 11:15:56 2025 by rpki-client